VDB
Sign up
HIGH7.5

GHSA-p75g-gcv5-42qg

Grin insufficient data validation

Details

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/grin
Introduced in: 3.0.0Fixed in: 4.0.0

Upgrade grin to 4.0.0 or newer (ecosystem crates.io).

References